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AMENDMENTS TO THE CLAIMS 



1 . (Currently amended) A method for authenticating a printed document comprising the 
following steps: 

a) a document producer sends information to be included in a document to an authentication 
authority; 

b) the authentication authority checks whether % producer ia mMmi ^ , ? 
produce the document and, if go , cryptogtaphically generates an authentication code from 
tlas-sajd iaformation, and sends the authentication code back to the document producer. 

6) "PPB receipt of the anthentrcafion coda f pm t he amheirtfc»% n aathorhv r tho rin*..m~* 
producer prints the document, including both the sajd. information and the gajd 
authentication code; and 
d > Upon presentation of the document for <n ihVn f ir*A n a ^Mmrnf rhrrlrrr 
^ cryptographicaily checks the authentication code against the iajd information in the 

(jU document to determine u^tf^. printett rinr.Trnent is authenffo 

2. (Currently amended) A method according to Claim I wherein the document producer 
includes a bar code in the document, said bar code containing the authentication code, and 
wherem Ae d^ent otetiea^ 

to obtain die authentication code. 

3. (Original) A method according to Claim 1 wherein the document includes a pre-printed 
serial number, which is sent to said authentication authority, and wherein said authentication 
authority uses said pre-printed serial number in generating said authentication code. 

4. (Original) A method according to Claim 3 wherein said pre-printed serial number is 
included in said document as a pre-printed bar code. 
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5. (Original) A method according to Claim 4 wherein the document producer uses a combined 
printer and bar-code scanner to read said pre-printed bar code and then to print said 
document. 

6. (Original) A method according to Claim I wherein said document checker performs the 
following steps: 

a) entering said authentication code into a computer; 

b) entering information in the document into the computer; 

c) causing the computer to cryptographically generate a check code from said information; 
and 

d) causing the computer to compare said check code with said authentication code and to 
generate a warning indication if said check code does not correspond with said authentication 

code. 



7. (Original) A method according to Claim t wherein said authentication authority 
cryptographically generates said authentication code using a cryptographic key associated 
with said authentication authority. 

8. (Currently amended) A method according to Claim 7 wherein said cryptographic key is a 
secret key known to both the authentication authority and said document checker, but not 
brown to mi riofifflflffirt prpdwsr- 

9* (Original) A method according to Claim 8 wherein said authentication code is generated by 
performing a key-dependent one-way hash of said information, using said secret key. 

10. (Original) A method according to Claim 7 wherein said authentication authority generates 
said authentication code using the private key of a public/private key pair, and wherein the 
document checker checks the authentication code using the public key of said public/private 
key pair. 
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11. (Original) A method according to Claim 1 wherein communication between said 
document producer and said authentication authority is protected by encryption. 

12. (Currently amended) A method according to Chum 1 wherein the document producer can 
specify an option of having the eerttfieate document printed by said authentication authority 
instead of printing the c e rtificate document locally. 

13. (Currently amended) Apparatus for authenticating a printed document, comprising: 

a) a plurality of document producer stations; 

b) at least one authentication service; and 

c) a plurality of document checker stations; 

d> wherein each document producer station includes means for inputting information to be 
included in a document, and means for seraiing said information to said authentication 
service; 

e) wherein the authentication service includes means for checks ****** ^ a , r 

producer fr authored to produce thn dnmm^ 1p rt if , cryptographically generating an 
authentication code ftom <** said, information, and means for sending the said 
authentication code back to the document producer steien station: 
f> wherein each document producer station includes means for printing the document, 
including both the information and the authentication code, upon recent ,ff^ 
authentication <**fc fro™ the authenri ^on Mirtu^ 
g) and wherein each document checker station includes means for cryptically 

checking fee said, authentication code against the said, information in the document, upon 
preservation of the document far fflithenticBtinn t^^ ine wh^ ^^^i 
document i s authentic. 
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14. (Original) Apparatus according to Claim 13 wherein each of said document producer 
stations includes a combined printer and bar code scanner for reading from said document a 
pre-printed bar code containing a serial number. 

15. (Original) Apparatus according to Claim 13 wherein each of said document producer 
stations includes means for printing bar codes on documents, and wherein each of said 
document checker stations includes a bar code reader for reading bar codes from documents. 
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